Vulnerability Details CVE-2021-20213
A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 4.3
Products affected by CVE-2021-20213
-
cpe:2.3:a:privoxy:privoxy:2.9.20
-
cpe:2.3:a:privoxy:privoxy:3.0.0
-
cpe:2.3:a:privoxy:privoxy:3.0.10
-
cpe:2.3:a:privoxy:privoxy:3.0.11
-
cpe:2.3:a:privoxy:privoxy:3.0.12
-
cpe:2.3:a:privoxy:privoxy:3.0.13
-
cpe:2.3:a:privoxy:privoxy:3.0.14
-
cpe:2.3:a:privoxy:privoxy:3.0.15
-
cpe:2.3:a:privoxy:privoxy:3.0.16
-
cpe:2.3:a:privoxy:privoxy:3.0.17
-
cpe:2.3:a:privoxy:privoxy:3.0.18
-
cpe:2.3:a:privoxy:privoxy:3.0.19
-
cpe:2.3:a:privoxy:privoxy:3.0.2
-
cpe:2.3:a:privoxy:privoxy:3.0.20
-
cpe:2.3:a:privoxy:privoxy:3.0.21
-
cpe:2.3:a:privoxy:privoxy:3.0.22
-
cpe:2.3:a:privoxy:privoxy:3.0.23
-
cpe:2.3:a:privoxy:privoxy:3.0.24
-
cpe:2.3:a:privoxy:privoxy:3.0.25
-
cpe:2.3:a:privoxy:privoxy:3.0.26
-
cpe:2.3:a:privoxy:privoxy:3.0.28
-
cpe:2.3:a:privoxy:privoxy:3.0.28-2.1
-
cpe:2.3:a:privoxy:privoxy:3.0.28-lp151.1.1
-
cpe:2.3:a:privoxy:privoxy:3.0.3
-
cpe:2.3:a:privoxy:privoxy:3.0.5
-
cpe:2.3:a:privoxy:privoxy:3.0.6
-
cpe:2.3:a:privoxy:privoxy:3.0.7
-
cpe:2.3:a:privoxy:privoxy:3.0.8
-
cpe:2.3:a:privoxy:privoxy:3.0.9